Every point has a reason
Observed data adds up to six points. Watchers add up to four. Retention, sharing, access logs, and oversight contribute the remaining nine.
Map the people, systems, and missing controls around an AI assistant. Your evidence stays in this browser until you export it.
The score is an evidence organizer, not a certification. Each point is visible so you can challenge the result and verify the controls that matter.
Observed data adds up to six points. Watchers add up to four. Retention, sharing, access logs, and oversight contribute the remaining nine.
The record uses browser storage on this device. Export is initiated by you, and nothing is sent to a server by the page.
Access and review appear narrow based on the entered evidence. Verify that controls remain effective.
Some exposure or control uncertainty deserves review before broader use.
Broad observation, additional watchers, or weak accountability create material surveillance exposure.
Which permissions are necessary for the feature I use, and can each one be disabled independently?
Verify scopeWhich employees, contractors, or vendors can access my content, under what trigger, and with what approval?
Name watchersWhen is content deleted from primary systems and backups, and can I initiate that deletion?
Set a limitCan I inspect access events, contest misuse, and reach an independent reviewer?
Close the loop